uefi_retool

uefiretool Uno strumento per il reverse engineering del firmware UEFI. Analisi del firmware UEFI con lo script uefiretool Utilizzo: Copia lo script idaplugin/uefianalyser.py e la directory idaplugin/uefianalyser nella directory dei plugin di IDA Modifica il file config.json PEDIR è una directory...

EUVD-2026-67354

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

EUVD-2026-67341

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

EUVD-2026-67351

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

exist

EXIST Sistema di aggregazione di informazioni esterne contro le minacce informatiche ⚠️ Questo repository non è più mantenuto / archiviato. I problemi di sicurezza non verranno risolti. EXIST è un'applicazione web per aggregare e analizzare CTI intelligence sulle minacce informatiche. EXIST è...

EUVD-2026-67401

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server...

CVE-2026-82082 Green-Computing｜NUMail - OS Command Injection

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server...

CVE-2026-82082

NUMail by Green-Computing is affected by an OS Command Injection vulnerability that allows unauthenticated remote attackers to inject and execute arbitrary OS commands on the server. The vulnerability is rated CVSS 3.1: 9.8 (CRITICAL) with a network attack vector, low complexity, and no privilege...

CVE-2026-82082 Green-Computing｜NUMail - OS Command Injection

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server...

atomic-operator

license atomic-operator Dieses Python-Paket wird verwendet, um Atomic Red Team-Tests Atomics auf mehreren Betriebssystemumgebungen auszuführen. Was gibt es Neues? Warum? atomic-operator ermöglicht es Sicherheitsexperten, ihre Erkennungs- und Abwehrfähigkeiten gegen die in atomic-red-team...

fingerprintx

Funzionalità • Installazione • Utilizzo • Esecuzione di fingerprintx • Utilizzo come libreria • Perché non nmap? • Note • Riconoscimenti fingerprintx è un'utility simile a httpx che supporta anche il fingerprinting di servizi come RDP, SSH, MySQL, PostgreSQL, Kafka, ecc. fingerprintx può essere...

dumpscan

Lo sviluppo pubblico di questo strumento è stato sospeso ma si sta ancora lavorando in privato. Aspettatevi un enorme aggiornamento nel Q3/Q4 2024. Dumpscan è uno strumento a riga di comando progettato per estrarre e scaricare segreti da formati di dump kernel e Windows Minidump. L'analisi dei du...

noseyparker

Nosey Parker è ora sostituito da Titus. Nosey Parker è ufficialmente ritirato Vedi il nostro annuncio https://www.praetorian.com/blog/titus-open-source-secret-scanner/. Il repository Titus si trova su https://github.com/praetorian-inc/titus Panoramica Nosey Parker è uno strumento CLI che trova...

nodesub

NODESUB Nodesub ist ein Kommandozeilen-Tool zum Finden von Subdomains in Bug-Bounty-Programmen. Es unterstützt verschiedene Subdomain-Enumerationstechniken und bietet flexible Anpassungsmöglichkeiten. Funktionen Führen Sie die Subdomain-Enumeration mit CIDR-Notation durch unterstützt Eingabeliste...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper (CVE-2025-58457)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper Vulnerability Details CVEID:CVE-2025-58457 DESCRIPTION: Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and resto...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper (CVE-2025-58457)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper Vulnerability Details CVEID:CVE-2025-58457 DESCRIPTION: Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and resto...

windows-api-function-cheatsheets

Windows-API-Funktions-Spickzettel Kontakt 🌨️ Tetsuo: https://www.x.com/tetsuo Inhaltsverzeichnis Windows-API-Funktions-Spickzettel Dateioperationen Prozessverwaltung Speicherverwaltung Thread-Verwaltung Dynamic-Link-Library-Verwaltung DLL Synchronisierung Interprozesskommunikation Windows-Hooks...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to SQL Injection vulnerability in Dashboard UI (CVE-2025-36368)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed SQL Injection vulnerability Vulnerability Details CVEID:CVE-2025-36368 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.51, and 6.2.1.0 through...

peeko

peeko Versione: v1.1 peeko è uno strumento C2 Command and Control basato sul browser e alimentato da XSS che sfrutta il browser della vittima come proxy invisibile all'interno delle reti interne. Tramite un payload XSS iniettato, peeko stabilisce una connessione WebSocket a un server centrale,...

phantomrecon

PhantomRecon PhantomRecon è uno strumento di automazione red team basato su CLI, modulare e guidato da agenti, progettato per dimostrare flussi di lavoro di sicurezza offensiva autonomi alimentati dall'IA Gemini di Google tramite Agent Development Kit - ADK. Avvio rapido CLI Esegui la console...